Pixel pulse

[saifhussan77-design]

Select Topic Area

Question

Body

from flask import Flask, render_template, request, redirect, url_for

app = Flask(name)

Dummy user store

users = {}
videos = []

@app.route('/')
def index():
return render_template("index.html", videos=videos)

@app.route('/login', methods=['GET', 'POST'])
def login():
if request.method == 'POST':
username = request.form['username']
password = request.form['password']
if username in users and users[username] == password:
return redirect(url_for('index'))
return "Invalid credentials"
return render_template("login.html")

@app.route('/signup', methods=['GET', 'POST'])
def signup():
if request.method == 'POST':
username = request.form['username']
password = request.form['password']
users[username] = password
return redirect(url_for('login'))
return render_template("signup.html")

@app.route('/upload', methods=['GET', 'POST'])
def upload():
if request.method == 'POST':
title = request.form['title']
link = request.form['link']
videos.append({"title": title, "link": link})
return redirect(url_for('index'))
return render_template("upload.html")

if name == 'main':
app.run(debug=True)flaskweb: python app.py

<title>Pixel Pulse</title>

Pixel Pulse

Login | Sign Up | Upload Video

---

Search

Videos

{% for video in videos %}

{{ video.title }} - Watch

{% endfor %} <title>Login - Pixel Pulse</title>

Login

Username:
Password:
Login <title>Sign Up - Pixel Pulse</title>

Sign Up

Username:
Password:
Sign Up <title>Upload Video - Pixel Pulse</title>

Upload Video

Title:
Video Link:
Upload body { font-family: Arial, sans-serif; margin: 20px; } input, button { margin: 5px; `}`

[MatheusFigueiredo7]

Hello,

I've reviewed your code. It's a great starting point for building a Flask app, but it has some important security and functionality issues that need to be addressed before it can be used for a real application.

The main problems were:

Security: Passwords were stored in plain text, and anyone could upload a video without logging in.

Functionality: The app didn't remember if a user was logged in, and it had minor syntax errors that prevented it from running correctly.

I've rewritten the code to fix these issues. This version is more secure and reliable.

Key Improvements in the New Code
Secure Passwords: Passwords are now stored securely using hashing. This means we don't save the actual password, only a scrambled version of it, which is a critical security practice.

User Sessions: The app now uses a session to remember who a user is after they log in. This allows you to protect certain pages.

Protected Routes: The /upload page is now protected, and you can only access it if you are logged in.

Correct Syntax: Minor syntax errors (name was changed to name) were fixed so the code runs without issues.

Logout Functionality: A new /logout route was added to allow users to end their session.

Here is the corrected and more secure code. I've also included a small note on how to update your HTML to take advantage of these new features.

from flask import Flask, render_template, request, redirect, url_for, session
from werkzeug.security import generate_password_hash, check_password_hash

app = Flask(__name__)
app.secret_key = 'your_secret_key_here'

users = {}
videos = []

@app.route('/')
def index():
    current_user = session.get('username')
    return render_template("index.html", videos=videos, current_user=current_user)

@app.route('/login', methods=['GET', 'POST'])
def login():
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        
        if username in users:
            if check_password_hash(users[username], password):
                session['username'] = username
                return redirect(url_for('index'))
            else:
                return "Invalid credentials. Please try again."
        else:
            return "User not found. Please sign up."
    
    return render_template("login.html")

@app.route('/signup', methods=['GET', 'POST'])
def signup():
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        
        if username in users:
            return "This username already exists. Please choose another."
        
        hashed_password = generate_password_hash(password)
        users[username] = hashed_password
        
        return redirect(url_for('login'))
        
    return render_template("signup.html")

@app.route('/logout')
def logout():
    session.pop('username', None)
    return redirect(url_for('index'))

@app.route('/upload', methods=['GET', 'POST'])
def upload():
    if 'username' not in session:
        return redirect(url_for('login'))
        
    if request.method == 'POST':
        title = request.form['title']
        link = request.form['link']
        videos.append({"title": title, "link": link})
        return redirect(url_for('index'))
        
    return render_template("upload.html")

if __name__ == '__main__':
    app.run(debug=True)

Hope this helps!

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬